This vulnerability in TimBroddin astro-mcp-server (up to version 1.1.1) allows remote attackers to perform SQL injection via manipulation of the request.params.arguments parameter in an unknown function within src/index.ts of the MCP Tool Query Construction component. The CVSS 4.0 score is 5.3 (medium), reflecting network attack vector, low attack complexity, no user interaction, and limited scope and impact on confidentiality, integrity, and availability. No official patch or remediation guidance has been published by the vendor as of the publication date.

Successful exploitation can lead to unauthorized SQL queries being executed on the backend database, potentially exposing or modifying sensitive data. The attack can be performed remotely with low privileges and no user interaction, which increases the risk. However, the impact is limited as indicated by the CVSS vector metrics (low confidentiality, integrity, and availability impact). Public exploit code availability raises the likelihood of exploitation attempts.

No official patch or remediation is currently available from the vendor. Users should monitor the vendor's advisories for updates. Until a fix is released, consider implementing application-layer protections such as input validation, parameterized queries, or web application firewalls to mitigate SQL injection risks. Avoid exposing the vulnerable service to untrusted networks where possible.